Insights
Engineering notes, infrastructure deep dives and practical guides from the Exotecho team.
The claim Knowing that your database backups exist and even that they are valid is not the same as knowing you can recover from a disaster, because the number that determines wheth...
Read article
The claim A firewall configured to block a list of bad things and allow everything else is protecting you from yesterday's threats and nothing more, because the list can never be c...
Read article
The claim Zero-downtime deployment and instant rollback are frequently treated as advanced capabilities that require a container orchestrator and a platform team. For a single appl...
Read article
The claim Logs that live only on the machine that produced them are useless in exactly the situation you most need them: when that machine has failed. The disk fills, the host is t...
Read article
The claim The shared admin account, whose password lives in a spreadsheet or a group chat and is known to everyone who has ever needed it, is the single most common serious securit...
Read article
The claim A TLS certificate that a human has to remember to renew will, eventually, expire on a weekend and take your site down — and the industry is actively removing the margin f...
Read article
The claim The place to reject abusive traffic is the cheapest place in your stack to reject it, and that is the reverse proxy at the edge — before the request reaches your applicat...
Read article
The claim Teams adopt infrastructure-as-code for the reproducibility and then store the one file that makes it reproducible — the state file — on a laptop, in a Git repository, or...
Read article
The claim A small business does not need a backup appliance, a vendor contract, or a six-figure disaster-recovery product to protect its data properly. A single open-source tool wr...
Read article
